Laravel CORS
A Laravel middleware package for handling Cross-Origin Resource Sharing (CORS) headers and pre-flight requests.
What is Laravel CORS?
laravel-cors is a middleware package for Laravel that handles Cross-Origin Resource Sharing (CORS) headers and pre-flight OPTIONS requests. It solves the problem of enabling secure cross-origin API requests from web browsers by automatically adding the necessary CORS headers to responses and managing pre-flight checks.
Laravel and Lumen developers building RESTful APIs or web services that need to be consumed by frontend applications hosted on different domains or subdomains.
Developers choose this package because it provides a robust, configurable, and framework-integrated solution for CORS handling, eliminating the need to manually manage CORS headers or write custom middleware. It follows Laravel conventions and offers detailed configuration options for complex cross-origin scenarios.
Overview
Adds CORS (Cross-Origin Resource Sharing) headers support in your Laravel application
Use Cases
Best For
- Adding CORS support to Laravel REST APIs consumed by JavaScript SPAs
- Configuring cross-origin requests between separate frontend and backend domains
- Handling pre-flight OPTIONS requests for custom HTTP methods or headers
- Securing APIs with specific allowed origins, headers, or credentials
- Migrating CORS configuration from older Laravel versions to newer ones
- Enabling CORS in Lumen microservice applications
Not Ideal For
- Laravel 9.2+ projects where built-in CORS middleware is available and preferred
- Teams prioritizing minimal third-party dependencies for long-term maintenance
- Non-Laravel projects requiring CORS handling, as it's framework-specific
- Developers needing active package updates and community support, since it's deprecated
Pros & Cons
Pros
Automatically responds to OPTIONS requests with correct CORS headers, eliminating manual pre-flight code, as stated in the README's features.
Offers extensive config options for paths, origins, headers, and methods via a dedicated config file, allowing precise security policies.
Provides full compatibility with Lumen through service provider registration, which lacks built-in CORS middleware.
Configurable to include Access-Control-Allow-Credentials header, essential for APIs using authorization headers or cookies.
Cons
The package is deprecated since Laravel 9.2 includes CORS middleware in core, making it unnecessary and unsupported for current projects.
Requires careful setup of paths and headers; misconfiguration leads to CORS errors, as highlighted in the 'Common problems' section.
Upgrading from older versions involved significant changes, such as new path properties and vendor name shifts, causing migration headaches.
CORS headers can fail if middleware order is incorrect or if other middleware interrupts the flow, requiring debugging expertise.
Frequently Asked Questions
Related Projects
LiveWireA full-stack framework for Laravel that takes the pain out of building dynamic UIs.
Debug BarDebugbar for Laravel (Integrates PHP Debug Bar)
IDE HelperIDE Helper for Laravel
Intervention ImagePHP Image Processing
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.